Skip to content

Adding detection events for nri-discovery-kubernetes #20647

Adding detection events for nri-discovery-kubernetes

Adding detection events for nri-discovery-kubernetes #20647

Workflow file for this run

name: Validate
on:
pull_request:
branches:
- 'main'
push:
branches:
- gh-readonly-queue/main/**
permissions:
contents: read
jobs:
lint:
name: Validate
runs-on: ubuntu-latest
permissions:
contents: read
steps:
- name: Harden Runner
uses: step-security/harden-runner@0080882f6c36860b6ba35c610c98ce87d4e2f26f # v2.10.2
with:
egress-policy: audit
- uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
with:
fetch-depth: 0
path: './wolfi-advisories'
- name: 'Clone Wolfi packages repository'
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
with:
repository: 'wolfi-dev/os'
fetch-depth: 0
path: './wolfi-packages'
ref: 'main'
- name: get fork point
id: fork-point
working-directory: ./wolfi-advisories
run: |
fork_point=$(git merge-base --fork-point refs/remotes/origin/${{ github.base_ref }} HEAD || git rev-parse HEAD)
echo "fork point will be $fork_point"
echo "fork_point=$fork_point" >> $GITHUB_OUTPUT
# this need to point to main to always get the latest action
- uses: wolfi-dev/actions/advisories-validate@main # main
with:
fork_point: ${{ steps.fork-point.outputs.fork_point }}
advisories-directory: './wolfi-advisories'
packages-directory: './wolfi-packages'
repository: ${{ github.repository }}
package-repo-url: 'https://packages.wolfi.dev/os'
token: ${{ secrets.GITHUB_TOKEN }}